CVE-2007-6427

Published: Jan 18, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.

Affected (22)

Products: X.org: X Server · Canonical: Ubuntu Linux · Debian: Debian Linux · +4 more

Show all products

X.org: X Server · Canonical: Ubuntu Linux · Debian: Debian Linux · Apple: Mac Os X · Fedoraproject: Fedora · Opensuse: Opensuse · Suse: Linux, Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Open Enterprise Server

1 product

1 product

1 product

1 product

1 product

1 product

5 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Open Enterprise Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
X.org X Server	Before 1.4.1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Before 10.4.11
Apple Mac Os X	From 10.5.0 to 10.5.2

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 7
Fedoraproject Fedora	Version 8

Configuration F

11 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 10.2
Opensuse Opensuse	Version 10.3
Suse Linux	Version 10.1
Suse Linux Enterprise Desktop	Version 10
Suse Linux Enterprise Desktop	Version 10 sp1
Suse Linux Enterprise Desktop	Version 9
Suse Linux Enterprise Server	Version 10 sp1
Suse Linux Enterprise Server	Version 8
Suse Linux Enterprise Server	Version 9
Suse Linux Enterprise Software Development Kit	Version 10 sp1
Suse Open Enterprise Server	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (134)

http://bugs.gentoo.org/show_bug.cgi?id=204362

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321

Source: cve@mitre.org

Broken Link

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=643

Source: cve@mitre.org

Broken Link

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

Mailing List

http://lists.freedesktop.org/archives/xorg/2008-January/031918.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/28273

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28532

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28535

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28536

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28539

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28540

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28542

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28543

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28550

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28584

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28592

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28616

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28693

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28718

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28838

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28843

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28885

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28941

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29139

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29420

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29622

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29707

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30161

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/32545

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200801-09.xml

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200804-05.xml

Source: cve@mitre.org

Third Party Advisory

http://securitytracker.com/id?1019232

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103200-1

Source: cve@mitre.org

Broken Link

http://sunsolve.sun.com/search/document.do?assetkey=1-26-200153-1

Source: cve@mitre.org

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2008-039.htm

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-078.htm

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2008/dsa-1466

Source: cve@mitre.org

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:021

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:022

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:023

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:025

Source: cve@mitre.org

Third Party Advisory

http://www.openbsd.org/errata41.html#012_xorg

Source: cve@mitre.org

Third Party Advisory

http://www.openbsd.org/errata42.html#006_xorg

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0029.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0030.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0031.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/487335/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/27336

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/27351

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/0179

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0184

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0497/references

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0703

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/3000

Source: cve@mitre.org

Third Party Advisory

http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities

Source: cve@mitre.org

MitigationThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/39759

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-2010

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10372

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/571-1/

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html

Source: cve@mitre.org

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html

Source: cve@mitre.org

Third Party Advisory

http://bugs.gentoo.org/show_bug.cgi?id=204362